Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/v-RhN13CI9T3snBV4rNHRf5hAdQ.mft
File:                     v-RhN13CI9T3snBV4rNHRf5hAdQ.mft (raw, json)
Hash identifier:          EiMc8Ewa+ohIMqarKwv49hdDI842adVR4DzhbFEM/D4=
Subject key identifier:   E4:0C:A2:53:3F:85:F2:2C:61:73:4B:71:FA:4C:6B:64:A2:A5:F7:76
Authority key identifier: BF:E4:61:37:5D:C2:23:D4:F7:B2:70:55:E2:B3:47:45:FE:61:01:D4
Certificate issuer:       /CN=A91CD98D/serialNumber=BFE461375DC223D4F7B27055E2B34745FE6101D4
Certificate serial:       0733
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v-RhN13CI9T3snBV4rNHRf5hAdQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/v-RhN13CI9T3snBV4rNHRf5hAdQ.mft
Manifest number:          071C
Signing time:             Fri 08 Aug 2025 22:16:37 +0000
Manifest this update:     Fri 08 Aug 2025 22:16:36 +0000
Manifest next update:     Fri 15 Aug 2025 22:16:36 +0000
Files and hashes:         1: v-RhN13CI9T3snBV4rNHRf5hAdQ.crl (hash: RuPEXEz9Xk1dX9kvR7GPXjePL1hW2HipI86fAxR6G+I=)
                          2: F9D5CEDC6FA011F0BC772442C4F9AE02.roa (hash: 2mAOe/g6cU50NrUWXxxCfgwwNW6C6QBqYUvKzf9IJ1E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/v-RhN13CI9T3snBV4rNHRf5hAdQ.crl
                          rsync://rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/v-RhN13CI9T3snBV4rNHRf5hAdQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v-RhN13CI9T3snBV4rNHRf5hAdQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1843 (0x733)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD98D, serialNumber=BFE461375DC223D4F7B27055E2B34745FE6101D4
        Validity
            Not Before: Aug  8 22:16:36 2025 GMT
            Not After : Aug 15 22:16:36 2025 GMT
        Subject: CN=68967744-67de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f3:03:8f:da:7e:fa:25:6f:29:ab:9d:8e:fe:
                    0c:76:00:c8:0b:a0:39:52:73:06:d9:ef:ec:f7:5e:
                    d3:33:c3:62:0e:04:61:ab:b8:39:b0:0e:44:51:97:
                    54:e1:b1:22:83:3b:1d:c5:ad:9d:1f:2e:df:ed:4c:
                    fa:20:cb:93:4a:ae:3f:ad:66:db:b2:8a:78:c3:f3:
                    b7:1e:ff:35:ea:d7:42:0c:f2:8d:8b:f5:3c:40:52:
                    14:34:80:c7:68:57:fc:b6:50:80:23:ee:a4:6b:7b:
                    79:97:ba:4b:ee:ee:12:17:c9:bc:4d:51:f0:b2:92:
                    87:8d:20:38:60:d1:54:68:ce:37:23:99:54:58:20:
                    03:e5:d9:3e:a2:0b:18:b0:bf:94:be:de:69:7f:05:
                    27:61:46:2c:e0:c9:f0:33:2a:18:54:56:7b:95:b0:
                    8a:28:26:8e:5b:03:0b:ad:18:d6:ae:79:b4:5c:33:
                    ad:69:42:18:e2:c6:b4:b9:f4:a2:fa:d6:1f:95:9e:
                    e2:f9:3e:88:4f:06:60:18:27:af:0f:dc:ea:ca:6a:
                    fc:2a:de:c7:82:46:67:d0:1d:2e:27:b0:b4:50:79:
                    10:d5:08:96:8f:f2:aa:aa:4a:19:1b:12:99:b8:51:
                    df:5c:12:05:13:23:b4:88:ec:8e:58:0d:e0:05:ff:
                    1c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:0C:A2:53:3F:85:F2:2C:61:73:4B:71:FA:4C:6B:64:A2:A5:F7:76
            X509v3 Authority Key Identifier:
                keyid:BF:E4:61:37:5D:C2:23:D4:F7:B2:70:55:E2:B3:47:45:FE:61:01:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/v-RhN13CI9T3snBV4rNHRf5hAdQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v-RhN13CI9T3snBV4rNHRf5hAdQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/v-RhN13CI9T3snBV4rNHRf5hAdQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:9d:af:a1:88:e8:2d:c1:c3:af:46:b4:47:bc:40:ee:5a:b5:
         28:42:db:19:f0:12:45:53:ba:a4:75:85:5b:8a:2f:7d:b6:10:
         af:09:85:96:4c:52:9f:86:16:3e:03:c2:d1:db:7d:42:cc:84:
         2b:99:15:da:4d:6a:38:36:4d:c1:8a:83:44:28:76:eb:46:d7:
         18:a9:b8:54:aa:5d:2a:04:02:6d:2d:80:31:63:2c:13:27:c5:
         52:e9:16:5a:21:0a:cf:ff:8b:bb:80:46:a6:56:e9:97:a2:f0:
         87:65:54:f8:a5:c2:20:42:09:41:6d:c9:f4:3d:c5:8c:12:f8:
         45:5a:a4:ed:4e:fc:4c:a1:62:30:c2:64:b5:c9:73:93:b2:fa:
         65:3a:38:07:01:31:ea:06:c9:12:cc:23:fe:db:2d:49:df:8e:
         56:d9:df:ad:35:21:05:d8:b9:10:e9:c9:da:6a:8e:d8:8e:6a:
         58:a4:45:7d:58:b7:70:a9:26:37:79:39:3b:c7:2a:f6:6f:41:
         91:db:7e:27:83:9a:c2:a9:b7:5a:0b:33:ba:bb:14:b1:4e:fc:
         b7:9f:39:26:48:5e:19:59:91:9f:64:ba:e6:7b:70:d6:5f:84:
         6a:f4:ee:1d:94:7a:a2:8d:ef:0f:a1:cf:65:51:ee:45:5f:aa:
         3c:cd:2e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:22:20 2025 by rpki-client